Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_1600559654228920"
MIME-Version: 1.0
Date: Sat, 19 Sep 2020 23:54:14 +0000
From: "Ryo ONODERA" <ryoon@netbsd.org>
Subject: CVS commit: pkgsrc/devel/nss
To: pkgsrc-changes@NetBSD.org
Reply-To: ryoon@netbsd.org
Message-Id: <20200919235414.A3AF8FB28@cvs.NetBSD.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

This is a multi-part message in MIME format.

--_----------=_1600559654228920
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"

Module Name:	pkgsrc
Committed By:	ryoon
Date:		Sat Sep 19 23:54:14 UTC 2020

Modified Files:
	pkgsrc/devel/nss: Makefile distinfo

Log Message:
nss: Update to 3.57

Changelog:
Notable Changes in NSS 3.57

* NSPR dependency updated to 4.29.
* The following CA certificates were Added:
    Bug 1663049 - CN=Trustwave Global Certification Authority
        SHA-256 Fingerprint:
97552015F5DDFC3C8788C006944555408894450084F100867086BC1A2BB58DC8
    Bug 1663049 - CN=Trustwave Global ECC P256 Certification Authority
        SHA-256 Fingerprint:
945BBC825EA554F489D1FD51A73DDF2EA624AC7019A05205225C22A78CCFA8B4
    Bug 1663049 - CN=Trustwave Global ECC P384 Certification Authority
        SHA-256 Fingerprint:
55903859C8C0C3EBB8759ECE4E2557225FF5758BBD38EBD48276601E1BD58097
* The following CA certificates were Removed:
    Bug 1651211 - CN=EE Certification Centre Root CA
        SHA-256 Fingerprint:
3E84BA4342908516E77573C0992F0979CA084E4685681FF195CCBA8A229B8A76
    Bug 1656077 - O=Government Root Certification Authority; C=TW
        SHA-256 Fingerprint:
7600295EEFE85B9E1FD624DB76062AAAAE59818A54D2774CD4C0B2C01131E1B3
* Trust settings for the following CA certificates were Modified:
    Bug 1653092 - CN=OISTE WISeKey Global Root GA CA
        Websites (server authentication) trust bit removed.

Bugs fixed in NSS 3.57

* Bug 1651211 - Remove EE Certification Centre Root CA certificate.
* Bug 1653092 - Turn off Websites Trust Bit for OISTE WISeKey Global Root GA
CA.
* Bug 1656077 - Remove Taiwan Government Root Certification Authority
certificate.
* Bug 1663049 - Add SecureTrust's Trustwave Global root certificates to NSS.
* Bug 1659256 - AArch64 AES optimization shouldn't be enabled with gcc 4.8.
* Bug 1651834 - Fix Clang static analyzer warnings.
* Bug 1661378 - Fix Build failure with Clang 11.
* Bug 1659727 - Fix mpcpucache.c invalid output constraint on Linux/ARM.
* Bug 1662738 - Only run freebl_fips_RNG_PowerUpSelfTest when linked with
NSPR.
* Bug 1661810 - Fix Crash @ arm_aes_encrypt_ecb_128 when building with Clang
11.
* Bug 1659252 - Fix Make build with NSS_DISABLE_DBM=1.
* Bug 1660304 - Add POST tests for KDFs as required by FIPS.
* Bug 1663346 - Use 64-bit compilation on e2k architecture.
* Bug 1605922 - Account for negative sign in mp_radix_size.
* Bug 1653641 - Cleanup inaccurate DTLS comments, code review fixes.
* Bug 1660372 - NSS 3.57 should depend on NSPR 4.29
* Bug 1660734 - Fix Makefile typos.
* Bug 1660735 - Fix Makefile typos.


To generate a diff of this commit:
cvs rdiff -u -r1.191 -r1.192 pkgsrc/devel/nss/Makefile
cvs rdiff -u -r1.117 -r1.118 pkgsrc/devel/nss/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_1600559654228920
Content-Disposition: inline
Content-Length: 2215
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/devel/nss/Makefile
diff -u pkgsrc/devel/nss/Makefile:1.191 pkgsrc/devel/nss/Makefile:1.192
--- pkgsrc/devel/nss/Makefile:1.191	Mon Aug 31 18:07:24 2020
+++ pkgsrc/devel/nss/Makefile	Sat Sep 19 23:54:14 2020
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.191 2020/08/31 18:07:24 wiz Exp $
+# $NetBSD: Makefile,v 1.192 2020/09/19 23:54:14 ryoon Exp $
 
 DISTNAME=		nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=		3.56.0
-PKGREVISION=		1
+NSS_RELEASE=		3.57.0
 CATEGORIES=		security
 MASTER_SITES=		${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 
@@ -136,7 +135,7 @@ do-install:
 # For consistency of libxul.so link in www/firefox.
 BUILDLINK_API_DEPENDS.sqlite3+=	sqlite3>=3.8.4.2
 .include "../../databases/sqlite3/buildlink3.mk"
-BUILDLINK_API_DEPENDS.nspr+=	nspr>=4.25
+BUILDLINK_API_DEPENDS.nspr+=	nspr>=4.29
 .include "../../devel/nspr/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"
 .include "../../mk/pthread.buildlink3.mk"

Index: pkgsrc/devel/nss/distinfo
diff -u pkgsrc/devel/nss/distinfo:1.117 pkgsrc/devel/nss/distinfo:1.118
--- pkgsrc/devel/nss/distinfo:1.117	Sun Aug 23 08:31:27 2020
+++ pkgsrc/devel/nss/distinfo	Sat Sep 19 23:54:14 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.117 2020/08/23 08:31:27 ryoon Exp $
+$NetBSD: distinfo,v 1.118 2020/09/19 23:54:14 ryoon Exp $
 
-SHA1 (nss-3.56.tar.gz) = 5203e66425f51738c723c5db1940fdc20a4c5472
-RMD160 (nss-3.56.tar.gz) = df67362953fcce5bd8cbc2ced72f536ff3912399
-SHA512 (nss-3.56.tar.gz) = f2eed8252c13b38a4d80a11203136d22a521205f814b6d954cc119ccf8921fcb8f689d919944bea4739d1575e9bda7e13cf2ad054ac91d51e049abe246efc845
-Size (nss-3.56.tar.gz) = 81706176 bytes
+SHA1 (nss-3.57.tar.gz) = ee150322d22ca2b449b31a9a4188eab156e0a13d
+RMD160 (nss-3.57.tar.gz) = d00996339012f73e11eb61d9e162e334921e4082
+SHA512 (nss-3.57.tar.gz) = 7e312d7539a26f57b968548935a7715cfa895aa61da21d0542ae45b71cb16f63167728534cdfd15f8eca68c75753a0df3d05e87b4c5acaabbda63c736e552ea2
+Size (nss-3.57.tar.gz) = 81712830 bytes
 SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1


--_----------=_1600559654228920--